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HP Domain ServiceControl 


HP Domain ServiceControl (hp dsc) is a web-based solution that 
provides the quality of service needed to operate and maintain your web 
applications. 
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HP Domain ServiceControl 


hp dsc is made up of H P AdmissionControl (hp ac), H P Domain 
Enterprise Server Management System (HP DESMS), and HP 
Local Director Controller (H P LDC): 

• hp ac - HP AdmissionControl helps to improve the quality of service 
provided by your web site. It controls the number and length of 
sessions admitted to the web server, to ensure that the system does 
not become overloaded, hp ac can be installed and configured for 
either Netscape or the Apache web server. 

• hp desms - HP Domain Enterprise Server Management System 
configures, administers, operates, and monitors your system, 
including hp ac for Netscape and hp ldc. 

• hp ldc - HP LocalDirector Controller automatically generates the 
information needed by Cisco's LocalDirector todistribute load and 
manage TCP/IP connections. 
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HP Domain ServiceControl 

Installation Requirements 


Installation Requirements 

The following is the list of requirements to install all the components of 
HP Domain ServiceControl (hp dsc). Ifyou are installing a subset of the 
components, go to the appropriate chapter(s) in this manual for more 
information. Information about HP Domain Enterprise Server 
Management System can be found in the Getting Started with HP 
Domain Software manual. 

Hardware 

• H P 9000 computer system 

• 32 M B of memory 

• CD-ROM drive to load the software 

Software 

• HP-UX 10.20 or 11.0 

• HP DESMS 

• Netscape Enterprise or FastTrack Server version 3.0 or later (hp ac 
for Netscape), or Apache Server 1.3.1 or later (hp ac for Apache) 

• Cisco LocalDirector version 2.1 or later 

Disk Space (Estimated) 

• 80 MB 

Installing HP Domain ServiceControl 

To install the hp dsc software, run swinstaii (as root) and install the 
bundlej 1592AA. 
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HP Domain ServiceControl 

Configuring HP Domain ServiceControl 


Configuring HP Domain ServiceControl 

Each component of hp dsc needs to be configured individually. Goto the 
following areas for more information about configuration: 

• hp ac for Netscape - See "Configuring H P AdmissionControl for 
Netscape" on page 17. 

• hp ac for Apache - See "Configuring H P AdmissionControl for 
Apache" on page 34. 

• hp desms - Seethe manual Getting Started with HP Domain 
Software. 

• hp ldc - See Chapter 3, "HP LocalDirector Controller," on page 47. 

Alsorefer totheHP Domain ServiceControl Release Note for other 
important information. 
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HP AdmissionControl 

What is HP AdmissionControl? 


What is HP AdmissionControl? 

HP Admission Control (hp ac) is a software plug-in (module), which runs 
inside an HTTP server. The HTTP servers currently supported are 
Netscape Enterprise, Netscape Fasttrack and Apache, hp ac can be 
configured to make certain decisions based on changing system 
conditions. For example, it can admit, reject, or defer new sessions based 
on system load, or to end active sessions based on the interval between 
requests and/or the length of a session. I n addition, hp ac maintains 
several operation and performance statistics which can be viewed in a 
Web client window. 

Viewing the Server Statistics 

TheHP ac maintains a series of statistics, which can beinspected on-line 
by pointing your web client (browser) to the foil owing URL: 
/hpac/about. hpac (or just /hpac/). From the about. hpac page you 
can access either the Statistics table, or the isolate table, by 
selecting the appropriate link. You can also view an explanation of what 
each statistic means, by selecting the field name. 

What is a Session? 

A session is an http request or sequence of http requests made to a web 
server by a single user. A simple session might consist of a request for a 
server's home page. If that page contains images, the session would also 
consist of requests for each image. 

A more complicated and longer session might consist of a request for a 
server's home page, following a link to a catalog, browsing the catalog 
and adding items to a shopping cart, and finally supplying payment 
information to complete a purchase. 

When Does a Web Server Become Overloaded? 

A web server becomes overloaded when there are too many requests for 
the server to fulfill; the server runs out of resources. Requests may be 
delayed or dropped. For example, a user involved in a long session may 
experience poor performance or may have to reload a page more than 
once for it to display. 
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HP AdmissionControl 

What is HP AdmissionControl? 


How Does HP AdmissionControl Work? 

hp ac monitors the resources and the number of arriving sessions on the 
web server. Based on available resources and how hp ac is configured, it 
will accept, defer, reject or redirect a session, hp ac makes surethe web 
server does not become overloaded by deferring, rejecting or redirecting 
any new sessions for which it does not have resources. It also allows an 
admitted session to be completed. 

When the web server's resources are available, hp ac allows the session 
to begin and will fulfill all requests made during this session, hp ac 
monitors the time between requests as well asthelength of the session. 
If one of these variables exceeds the thresholds configured in hp ac, the 
session is terminated. Otherwise, all requests are fulfilled until the 
session is completed. 

When the web server's resources are not avai I able, h p ac wi 11 defer, reject 
or redirect the session. The web administrator can choose to redirect the 
request to another U RL, or serve a page with an error message or some 
helpful information. 
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HP AdmissionControl for Netscape 


HP AdmissionControl for Netscape 

HP AdmissionControl (hp ac) for Netscape is part of the H P Domain 
ServiceControl (hp dsc) product. You do not need to load the entire hp 
dsc product if you only want to use hp ac for Netscape. 

Installing HP AdmissionControl for Netscape 

Installation Requirements 

Verify that the following hardware, software, and disk space is available 
for the H PAdmissionControl for Netscape installation. 

Hardware 

• H P 9000 computer system 

• 32 M B of memory 

• CD-ROM drive to load the software 

Software 

• HP-UX 10.20 or 11.0 

• Netscape FastTrack Server version 3.0 or later OR 
Netscape Enterprise Server version 3.0 or later 

Disk Space (Estimated) 

• 38 MB 

Installing the Software 

To install hp ac for Netscape, run swinstaii (as root), double-click on 
the bundleJ 1592AA to view the software, and select the hp ac software. 
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HP AdmissionControl 

HP AdmissionControl for Netscape 


Configuring HP AdmissionControl for 
Netscape 

If Netscape Enterprise Server version 3.0 or later was already installed 
on your system in the /opt/ns-enterprise3 directory before you 
installed H P Domain ServiceControl, hp ac for Netscape is automatically 
configured and enabled on your system. 

If Netscape FastTrack Server version 3.0 or later was already installed 
on your system in the /opt/ns-ftrack directory before you installed 
HP Domain ServiceControl, hp ac is automatically configured and 
enabled on your system. 

If both servers were already installed on your system before you 
installed HP Domain ServiceControl, hp ac is automatically configured 
and enabled for your Netscape Enterprise Server. 

If neither server was installed before you installed HP Domain 
ServiceControl, you must first install the Netscape Enterprise Server 
version 3.0 or later or Netscape FastT rack Server version 3.0 or later and 
then run the setup script (seethe next section for information about 
runni ng the setup scri pt). 

If you installed either server after installing HP Domain ServiceControl, 
you must run the setup script (seethe next section for information about 
runni ng the setup scri pt). 

If you installed either server in another server root directory other than 
/opt/ns-enterprise3 (for the Netscape Enterprise Server) or 
/opt/ns-ftrack (for the Netscape FastTrack Server), you must run the 
setup script (seethe next section for information about running the 
setup script). 

Running the Setup Script 

You should only run the setup script if you installed the Netscape 
Enterprise Server or Netscape FastTrack Server after installing HP 
Domain ServiceControl or if the server root directory is something other 
than / opt/ns-enterprise3 (for the Netscape Enterprise Server) or 
/opt/ns-ftrack (for the Netscape FastTrack Server). 
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HP AdmissionControl for Netscape 


To run the setup script, type: 

/opt/hpac/setup 

At the Root pathname of Netscape server prompt, enter the 
Netscape Server root directory. 

The setup script will automatically configure and enable hp ac. 

Default values set for all applicable configuration parameters are listed 
in "HP AdmissionControl Configurable Parameters for Netscape" on 
page 60. 

Setting the H P AC Configurable Parameters for 
Netscape 

You can edit the configuration parameters in three different ways: 

• YOU can access the HP AdmissionControl Settings 

administration web page at the URL http: //system_name/hpac. 
Your Netscape Server must be running to access this page. Use the 
system's root user and password to access this page. 

• You can edit the configuration file 

/ opt / n s -ser ver_na me/ serverj d / conf ig/hpac/conf ig. ac 

Refer to "HP AdmissionControl Configurable Parameters for 
Netscape" on page 60 for a list of the available configurable 
parameters for the N etscape server. 

• You can use the HP DE SM S i nterface to access the hp 
A dmissionControl Settings administration web page (HP AC is 
located under Server Control). Your Netscape Server and HP 
administration server must be running. 

To start the HP administration server, type 
/opt/hpwebsuite/start-admin and go to the U RL 
http://system_name: 8181 /. The default user ID ishpadmin; and 
the default password is hpadmin. 

To access hp ac for Netscape, you must enter the system's root user 
and password. 
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HP AdmissionControl for Netscape 


The foil owing is an example of the "HP AdmissionControl Settings" 
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HP AdmissionControl 

HP AdmissionControl for Netscape 


The foil owing sections describe the parameters that can beset using the 
hp AdmissionControl Settings administration web page. See "HP 
AdmissionControl Configurable Parameters for Netscape" on page 60 for 
a list of the available configurable parameters for the Netscape server 
and a list of defaults already configured in config.ac. 

Admit Sessions. For the default value, the load threshold is set to 2. 


HP AC for Netscape Configurable Parameters: Admit Sessions 


Parameter 

Description 

Shutdown 

After the specified number of seconds, do not admit 
any new sessions and reject all remaining sessions. 

Always 

DisableHP ac and admit all sessions to the web 
server. If you are permanently disabling hp ac, you 
should remove hp ac from you system (see 
"Removing HP AdmissionControl for Netscape"on 
page 25 for more information). 

Load 

If the load is less than this specified amount, admit 
the session. The load threshold works best when a 
web application is processor-intensive. 


To calculate the load threshold, do the foil owing: 

1. Run the top command. Note the first listed "Load averages" and the 
percentage listed under "I DLE " of "Cpu states." 

Sample Output from the top Command 

System: web_server Wed Apr 22 10:41:59 1998 

Load averages: 1 . 45 , 1.46, 1.78 

149 processes: 145 sleeping, 3 running, 1 stopped 
Cpu states: 

LOAD USER NICE SYS IDLE BLOCK SWAIT INTR SSYS 
1.45 100.0% 0.0% 0.0% 0 . 0 % 0.0% 0.0% 0.0% 0.0% 

2. If I DLE is greater than zero, then set the threshold to 
(100- IDLE)/100. 

If I DLE equals zero, then set the threshold to the first listed load 
average. 
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HP AdmissionControl for Netscape 


Table 2-2 


Using the above sample output, you would set the load threshold to 
1.45. 

Run top when performance is poor and acceptableto determine an 
acceptable load level. 

End Sessions. For thedefault, the interval between requests is set to 
600 seconds (10 minutes) and the session duration is disabled. 


HP AC for Netscape Configurable Parameters: E nd Sessions 


Parameter 

Description 

1 nterval 
between 
requests 

The amount of time, in seconds, between requests 
within the session. If the time between requests 
exceeds the specified threshold, the session is ended. 

Session 

duration 

The amount of time of the session. If the session 
exceeds the specified threshold, the session is ended. 
Set this parameter to zero to disable this threshold. 


Respond to Rejected Sessions. Rejected sessions can either be 
redirected or served a web page containing a standard error message or 
other information. 

If redirection is disabled or the redirect request is not accepted, a web 
page containing a standard error message or other information is 
returned. 

Thedefault is to disable redirection and serve an error pagetoa rejected 
session. 
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HP AdmissionControl 

HP AdmissionControl for Netscape 


HP AC for Netscape Configurable Parameters: Redirect Rejected 
Sessions 


Parameter 

Description 

Disable 

Do not redirect the rejected session. 1 nstead, return 
a web page with an error message or other 
information. 

Address 

Redirect the rejected session to a load balancing 
system (such as a cluster manager), to another web 
server, or to another system set up to specifical ly 
handle rejected sessions. Specify the full domain 
name or 1P address. 

Cluster 

Redirect the rejected session to a randomly selected 
member of a cl uster. 

Domain 

Redirect the rejected session to the domain to which 
the systems in the cluster belong. For example, if 
the cl uster consists of the two systems 
wwl.sales.acme.com and 
ww2.saies.acme.com, specify the domain as 
. sales. acme. com. Note the leading dot. 

The domain specifies the scope over which the 
client-side cookies can be shared (hp ac uses 
cl ient-side cookies to encode session i nformati on). 

Group 

The cl uster group to which this system belongs. 

TTL 

Time to Live. The number of redirections allowed 
before rejecting the session. Add one to the TTL 
parameter to get the number of redirects. For 
example, setting the TTL to 0 allows one 
redirection. Setting the TTL to 1 allows two 
redirections. 

It is recommended that theTTL beset to a value no 
larger than 2. 


When redirection is disabled, the foil owing types of web pages can be 
served: 


22 


Chapter 2 




HP AdmissionControl 

HP AdmissionControl for Netscape 


Table 2-4 


HP AC for Netscape Configurable Parameters: Respond to 
Rejected Sessions 


Parameter 

Description 

Error 

The "Server Temporarily Unavailable" error message 
is served to rejected requests. This is the easiest but 
least informative way to respond to a rejected request. 
Extra load on the system may be generated by users 
trying to immediately re-establish a connection. 

Page 

The specified web page is served to rejected requests. 
You can provide information to the customer such as 
why the session was rejected and when would be a 
more opportune time to return tothesite. A user is less 
likely to try immediately re-establishing a connection 
and more likely to return to the site. 

Allocate 

sessions 

A countdown web page is served to rejected requests. 
The user is asked to wait a certain amount of time 
before getti ng access to the site. This type of session is 
given priority over new sessions. 

E nter the number of sessions you wish to have 
admitted each minute. For example, if you allocate five 
sessions per minute, one session will be admitted every 
12 seconds. If seven sessions are rejected, five will be 
admitted the next minute and two will be admitted the 
minuteafter. Make sure the allocation rate is less than 
the system's capacity. 

You may want to compensate the allocation for 
no-shows. 

Monitoring the % Priority Requests statistic will 
show the system's load due to priority sessions. Reduce 
the allocation rate if the number approaches or is over 
50%. 

Also monitor the Last Allocation Delay statistic. 

11 shows how long a deferred user waited before his/her 
session was admitted. 
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HP AdmissionControl for Netscape 


Parameter 

Description 

External 

Use an external function or application. For example, 
the user could be offered a discount or other incentive 
to return to the site; or, the user could be offered to 
enroll in a service plan that guarantees access to the 
site. Currently, no supported functions or applications 
exist. If selected, the Error page is returned. 

Exclude 

After the initial rejection, the user is prevented from 
returni ng to the site after the specified amount of ti me 
(in seconds). This discourages a user from trying to 
immediately re-establish a connection. 

If a session is allocated, this isthe minimum delay that 
can be scheduled. 


Creating an Allocation Page for Rejected Sessions. 

The following isthe default allocation page served to the user: 

Server Busy 

We are sorry our server is busy, and in order to ensure adequate 
levels of service to our current visitors, we cannot serve you at 
this time. We have allocated you a position in line and will serve 
you as soon as we can. 

You will automatically enter the site in 1:23 (minutes:seconds). 

To change the content of this page, you must edit the file 

/ opt/ns-server_name/server_id/conf ig/hpac/conf ig. ac 

Tochangethe "Server Busy" title, edit the deferral.title parameter. To 
change the content of the message, edit the deferral.message 
parameter. To edit the countdown line, edit the deferral.enterMsg 
parameter. Note that each parameter is ended by a single period on its 
own line. 

The default allocation page would include the foil owing entries in the 
config.ac file: 

deferral.title 
Server Busy 

deferral.message 

We are sorry our server is busy, and in order to ensure 
adequate levels of service to our current visitors, we 
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HP AdmissionControl for Netscape 


cannot serve you at this time. We have allocated you a 
position in line and will serve you as soon as we can. 

deferral.enterMsg 

You will automatically enter the site in 


Starting HP AdmissionControl for Netscape 

hp ac is automatically enabled after you have installed H P 
ServiceControl (provided you have met certain conditions; see 
"Configuring H P AdmissionControl for Netscape" on page 17 for more 
information) or run the setup script (see "Running the Setup Script" on 
page 17 for more information). 

I f you have stopped h p ac, then you can start it agai n by configuri ng and 
specifying the load from the HP AdmissionControl Settings 

administration web page. 

Stopping HP AdmissionControl for Netscape 

To stop or disable hp ac, set the Admit Session to "Always" from the hp 

AdmissionControl Settings administration web page. 

If you are permanently stopping hp ac, you should remove hp ac from 
your system (see "Removing H P AdmissionControl for Netscape" below 
for more information). Because hp ac does not cache html, performance 
may be slow for static pages. 

Removing HP AdmissionControl for Netscape 

To remove hp ac, do the foil owing: 

1. Type /opt/hpac/setup -r 

2. At the Enter root pathname of Netscape server prompt, 
enter the Netscape Server root directory. 
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Table 2-5 


Logging HP AdmissionControl Information 

Saving HP AdmissionControl Information 

hp ac admission decisions can be saved to the server access log. To 
i ncl ude them, do the fol I owi ng: 

1. Start the Netscape Administration Server. 

2. Select the server to configure. 

3. Click on Server Status. 

4. Select Log Preferences. 

5. Enter the name of the new access logfileto create (Netscape will not 
let you change the format of a Iogfile that is in use). 

6. Select Custom format near the bottom of the page. 

7. Append %Req->vars . hpacSessionState% at the end of the 
Custom format field. Be sure to include a space at the beginning of 
this entry to separate it from the other entries. 

8. Click ok to make the change. 

9. Click on Save and Apply to save your changes. 

One of the fol lowing values will be logged to the access logfil e: 

Admission Decision Log Values 


Value 

Description 

- 

A management request was served from the cache. 

2 

The request was rejected. 

3 

The request was processed as part of a basic priority session. 

4 

The request was processed as part of a high priority session. 

5 

The request was deferred to a future time slot. 

6 

The request was redirected to another server. 
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HP AdmissionControl for Netscape 


Table 2-6 


Logging Statistics to a File 

The statistics displayed on the HP AdmissionControl Statistics 

web page can be logged to a file. To log the statistics to a file add the 
following lines to 

/ opt/ns-server_name/server_id/conf ig/hpac/conf ig. ac: 

log.file filename 
log.interval seconds 

Where filename is the name of the file to which to save the statistics and 
seconds is how often the statistics are saved (in seconds). The 
log. interval default is 60 seconds. 

Restart the web server for the changes to take effect. 

The following is an exampleof a log entry: 

10/Mar/1998:20:39:00,15,0,0,0,0,0,0,0,181,0,0,0.5,0.00, 

92 where each field is delimited by a comma. The fields are: 

HP AC Log File Statistics 


Statistic Name 

Example Value 

Time (GMT) 

10/M ar/1998:20:39:00 

Basic Sessions 

15 

Priority Sessions 

0 

Redirected Sessions 

0 

Sessions Rejected 

0 

Sessions Rejected Again 

0 

Sessions Timed Out 

0 

Sessions Too Long 

0 

Bad MD5 Requests 

0 

Basic Requests 

181 

Priority Requests 

0 

Management Requests 

0 

Load 

0.5 

Percentage Priority Requests 

0.00 

Last Allocation Delay 
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Other Configuration Considerations 

This section covers tasks beyond basic configuration. 

Tuning Your Web Server's Cache 

To control session admissions, hp ac tracks the session state by including 
cookies in http responses. For hp ac to operate effectively, the server 
cannot generate all of its responses from the cache. This may cause the 
performance of the web server to be slow. 

However, you can tune the cache by configuring the 

/opt/ns-server_name/server_id/config/hpac/config.ac file to 
allow specified mime types to be cached or not cached. 

For example, if you serve http pages with embedded images, you can 
cache the images by adding the foil owing lines to the configuration file: 

mime.cache 

mime.type image/gif 

mime.type image/jpeg 

Or, if your pages are generated by an application such as an nsapi 
pi ug-i n or cgi scri pt, you can al I ow al I mi me types to be cached except for 
the mi me types associated with the application. For example, to cache all 
mi me types except those generated by cgi scri pts, add the fol I owi ng I i nes 
to the configuration file: 

mime.nocache 

mime.type magnus-internal/cgi 

You must restart the web server if you make changes to the configuration 
file. 

If a page is not cachable, such as a dynamically created page or other 
pages marked by nsapi as uncachable, you cannot cache it even if you 
specify it in the configuration file as cachable. 
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Allowing Equal Access to a System's Resources 

If a web server hosts multiple virtual web sites, hp ac can be configured 
to balance traffic between each site, allowing each site to share the 
system's resources equally. 

The description or pattern of the web servers' document roots for each 
virtual server must be configured in the 
/opt/ns-server_name/server_id/conf ig/hpac/conf ig. ac 
configuration file, hp ac uses the isolate .pattern parameter to 
monitor each site's traffic. You must restart the web server after editing 
the configuration file. 

For example, a system is hosting two web sites for Company A and 
Company B. Company A's home page is located at 

/web_pages/company_a/index. html and Company B’s home page is 
located at /web_pages/company_b/index . html. To monitor each 
site's traffic, add the following tothe configuration file: 

isolate.pattern /web_pages/%[ A /] 

Refer to documentation on the sscanf command for more information 
on constructing the pattern. 

After editing the configuration file, restart the web server. 
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Detecting Failed Servers in a Cluster 

When a Webserver is running, it periodically broadcasts a message that 
it is up. When a web server is shut down, it broadcasts a message that is 
unavailable. When a web server is not running, it does not broadcast a 
message. 

Each web server in a cluster listens for these broadcast messages. Based 
on the messages received or not received, it will mark each system as up 
or down. 

The web server marks a system as up when it receives the appropriate 
broadcast message from that system. The web server marks a system as 
down when it receives the appropriate message or it fails to receive a 
message after a specified number of broadcast intervals. 

In the hp ac 

/ opt/ns-server_name/server_id/conf ig/hpac/conf ig. ac 

configuration file, you can configure how often messages are sent 
(broadcast interval) and how many messages can be missed before the 
system is marked as down. The parameters are: 

cluster.keepalive.interval 60 
cluster.keepalive.misses 3 

where the interval is measured in seconds. The values given arethe 
default values. 

I f you configure these parameters, the web server must be restarted. 
Also, all systems in the cluster should use the same values for these 
parameters. 

Decreasi ng the broadcast i nterval decreases the ti me it takes to detect a 
failure. However, it also increases broadcast traffic. 

Sometimes, not all broadcast messages are received. Therefore, the 
number of misses should be set to a value greater than one. However, in 
a large cluster, removing a machine falsely does not severely impact the 
cluster's capacity and improves the responsiveness to failures. 

The maximum time to detect a failure can be determined by multiplying 
the broadcast interval by the number of misses. For the default values, 
the maximum failure detection time is three minutes. 


30 


Chapter 2 




HP AdmissionControl 

HP AdmissionControl for the Apache Web Server 


HP AdmissionControl for the Apache 
Web Server 

Installing HP AdmissionControl for Apache 

HP AdmissionControl (hp ac) for the Apache Web Server is part of the 
HP Domain ServiceControl (hp dsc) product. You do not need to load the 
entire hp dsc product if you only want to use hp ac for the Apache web 
server. Specifically, because hp ac for Apache is not integrated with hp 
desms, you do not need to install hp desms with this part of the product. 

Installation Requirements 

Hardware 

• H P 9000 computer system 

• 32 M B of memory 

• CD-ROM drive to load the software 

Software 

• HP-UX 10.20 or 11.0 

• Apache Server 1.3.3 or later 

Disk Space (Estimated) 

• 1MB 

Installing the Software 

To install hp ac for the Apache web server, run swinstaii (as root), 
double-click on the bundleJ 1592AA to view the software, and select the 
hp ac software. Unless instructed otherwise, swinstaii copies the hp 
ac for Apache files from the distribution media to the directory 

/opt/hpac-apache. 
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Integrating HP AdmissionControl with the 
Apache Web Server 

To integrate the hp ac modulewith the Apache server, follow the steps 
under the scenario that best describes your installation: 

Scenario 1: The Apache server is already installed on 
the system. 

1. Verify that your server has been built with Dynamic Shared Object 
(DSO) support. 

a. Run the command apache_home/sbin/httpd -l or 
apache_home/bin/httpd -1 (depending on the layout). 

The output should list mod_so. c. This verifies that DSO support 
is present. 

b. If DSO support is not present, follow the instructions 2 to 4 in 
Scenario 2, then continue with step 3 below. 

2. Find the file mod_hpac. so for your HP-UX release and Apache 
version in /opt/hpac-apache/lib , and copy it to 
apache_home/iibexec 

3. Edit the file apache_home/etc/httpd.conf (or 
apache_home/conf/httpd. conf, if you used the older layout). 

a. At the end of the section that contains entries of the form 

AddModule xxx_module libexec/mod_xxx.o or 
LoadModule xxx_module libexec/mod_xxx.so, add the 

following entry: 

LoadModule hpac_module libexec/mod_hpac.so 

b. At the end of the section that contains entries of the form 
AddModule mod_xxx.c, add the foil owing entry: 

AddModule mod_hpac.c 

c. Add the foil owing line: 

Alias /hpac/ /opt/hpac-apache/html/ 


NOTE If you prefer, you can add this line to the srm. conf file. The /hpac/ 

location should be protected by a password, to prevent unauthorized 
access to the server's statistics. 
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4. Restart the Apache server so that the changes wi 11 take effect. Before 
restarting the server it is recommended that you read "Configuring 
H P AdmissionControl for Apache" on page 34. 

Scenario 2: The Apache server is not yet installed on 
the system. 

1. Download and unpack the Apache distribution archive. 

2. Create the directory hpac in apachejdist/src/modules, then find the 
filemod_hpac . so for your H P-UX release and Apache version in 

/opt/hpac-apache/lib . Copy this file to: 
apache_dist/sr c/modules/hpac. 

3. Edit thefile apache_dist/ src/Configuration .tmpi and add the 
following line at the end of the file: 

AddModule modules/hpac/mod_hpac.o 

4. Follow the instructions for building and installing the Apache server, 
as described in the Apache documentation (for example, run config, 
make, and make install). I n particular, makesurethat you enable 
the hpac module as a shared module. For example, run config with 
the options: 

--enable-module=hpac 
--enable-shared=hpac 

5. Edit the configuration file apache_home/etc/httpd. conf or 
apache_home/etc/srm. conf. (Thesefiles are in 
apache_home/conf/, if you used the older installation layout.) Add 
the foil owing line: 

Alias /hpac/ /opt/hpac-apache/html/ 


NOTE If you prefer, you can add this line to the srm. conf file. The /hpac/ 

location should be protected by a password, to prevent unauthorized 
access to the server's statistics. 


6. Restart the Apache server, so that the changes wi 11 take effect. Before 
restarting the server, it is recommended that you read the next 
section. 
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Configuring HP AdmissionControl for Apache 

Once the H P Admission Control module is integrated with the Apache 
server, admission control becomes operational when the server is 
(re)started. However, the module's defaults are unlikely to satisfy the 
needs of all sites. This section describes the configurable parameters of 
the hp ac module and how to set these parameters. 

Setting the Configurable Parameters 

You can modify the behavior of the hp ac modules by placing the 
appropriate directives (commands) in your Apache configuration file(s): 
either httpd.conf, srm.conf, or access. conf. These configuration 
files can be found in apache_home/etc/ (or in apache_home/conf/, if 
you used the older installation layout.) All hp ac directives start with the 
characters H PAC. See "HP AdmissionControl Configurable Parameters 
for the Apache Web Server" on page 65 for a list of the available 
configurable parameters for the Apache server. 

Admitting Sessions. To turn the admission control on and off, use 
the HPACAdmissionControi directive. The default for this directive is 
"on". For example, to turn admissions off, use the foil owing directive in 
your configuration file: 

HPACAdmissionControi off 

If admission control is disabled (set to off), all sessions are admitted to 
the web server. 

When the admission control is in effect, new sessions are admitted based 
on system load. You can set a load threshold using the 
HPACAdmitLoadThreshoid directive. The default for this directive is 
"2.0". For example, to set the load threshold at 1.5, use the foil owing 
directive in your configuration file: 

HPACAdmitLoadThreshoid 1.5 
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To calculate the load threshold 

1. Run the top command. Notethefirst number in the "Load averages" 
list and the percentage listed under "I DLE" of "Cpu states". 

Sample Output from the top Command 

System: web_server Wed Apr 22 10:41:59 1998 

Load averages: 1 . 45 , 1.46, 1.78 

149 processes: 145 sleeping, 3 running, 1 stopped 
Cpu states: 

LOAD USER NICE SYS IDLE BLOCK SWAIT INTR SSYS 
1.45 100.0% 0.0% 0.0% 0 . 0 % 0.0% 0.0% 0.0% 0.0% 

2. If I DLE is greater than zero, then set the threshold to 
(100- IDLE)/100. 

If I DLE equals zero, then set the threshold to the first listed load 
average. 

Using the above sample output, you would set the load threshold to 
1.45. 

Run top when performance is poor, and when it is acceptable to 
determine an acceptable load threshold. 
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Ending Sessions. A session duration can beset with the 
HPACSessionDuration directive. The default for this directive is "0". 
For example to set a session to 3600 seconds, use the foil owing directive 
in your configuration file: 

HPACSessionDuration 3600 

The duration of a session is specified in seconds. If the duration is set to 
0, the session never expires. If a session exceeds the specified duration, it 
is ended. 

A session can also determinated if the time interval between two 
successive requests of a session exceeds a set number of seconds. You can 
set this time interval with the HPACidieSessionTimeout directive. 
The default for this directive is "300” seconds. For example, to set the 
time interval to 120 seconds, use the following directive in your 
configuration file: 

HPACidieSessionTimeout 120 


NOTE Termination of asession means that the next request coming from the 

same user agent will start a new session. All privileges that the old 
session might have enjoyed are lost. 


Responding to Rejected Sessions. If conditions on the web server 
do not allow servicing new requests, sessions can be redirected or 
rejected. 

You turn on redirection indirectly by setting the redirection URL with 
the HPACRedirectURL directive. For example, to redirect rejected 
sessions, use the following directive in your configuration file, filling in 
the appropriate URL: 

HPACRedirectURL [http ://] host [ : port] 


NOTE A request can be redirected only to a mirror site. 


A redirected session can be bounced back to the original server. You can 
control how many times a session is redirected with the 
HPACRedirectTTL directive (TTL stands for time-to-live). The default 
for this directive is "0." For example, to set the number of times a session 
is redirected to 1, use the foil owing directive in your configuration file: 

HPACRedirectTTL 1 
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The number set by this directive is the number of redirections a session 
has been subjected to, beyond the first one. I n other words, 0 means the 
session has been redirected once, 1 means the session has been 
redirected twice, etc. This number should not exceed 2, to avoid wasting 
the resources of the server(s) involved. (The default is probably 
appropriate for most sites.) 

If a session has to be rejected, the action the admission controller takes 
depends on the rejection policy in effect. The rejection policy can be 
reject, rejectpage, or dder. It can beset using the directive 
HPACRe jectionPolicy. The default for this directive is "reject." For 
example, to set the rejection policy to "defer," use the foil owing directive 
in your configuration file: 

HPACRejectionPolicy defer 

When the reject rejection policy is in effect, the server sends the 
http_service_unavailable code and associated message to the 
client. This is the easiest but least informative way to respond to a 
rejected request. Users may try to reconnect right away, generating extra 
load on the system. 

When the rejectpage rejection policy is in effect, the server returns the 
contents of a page containi ng a custom, more explanatory response to the 
client. For instance, the customer whose access has been rejected may be 
given a reason for the rejection and a suggestion of a more opportune 
time to return to the site. The extra information is more likely to 
dissuade users from retrying immediately, without discouraging them 
from returning to the site in the future. 

The location of the file holding this custom response is specified with the 
directive HPACRe jectPagePath. For example, 

HPACRejectPagePath <flle_path> 

If the policy is set to rejectpage, but the rejectpage path has not been set 
(or cannot be accessed), the server response is the same as the reject 
policy server response. 

Thed^er policy is a special case of rejection. The admission of a session 
rejected under this policy is merely postponed to a future time slot, when 
the session will automatically gain access to the server. Oncea deferred 
session is admitted, it is handled as a priority session. 
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A countdown web page is returned to the user agent in response to 
deferred requests which shows how long the user has to wait in line. 

You can set the rate (per minute) at which deferred sessions are admitted 
to the server with the HPACDeferredAdmitRate directive. The default 
for this directive is "10" sessions per minute. For example, to set the rate 
at which the deferred sessions are admitted to the server to 5 sessions 
per minute, use the foil owing directive in your configuration file: 

HPACDeferredAdmitRate 5 

I n the example above, one session will be admitted every 12 seconds. (At 
this rate, for example, if there are only 5 sessions waiting for admission, 
they will all gain access during the next minute. Ifthereare 20 sessions 
waiting for admission, the last 5 sessions will be admitted 4 minutes 
later than the first 5.) 

When setting the admission (allocation) rate of deferred sessions, make 
sure that the system has adequate capacity to handle it. Take into 
account that some of the deferred sessions may not come back (because 
the user gave up), and compensate accordingly. 

Monitoring the % Priority Requests and Last Allocation Delay 

statistics can help in setting a realistic allocation rate. The first statistic 
will show the system's load dueto priority sessions. Reduce the 
allocation rate if this number approaches, or is over, 50%. The second 
statistic shows how long the user of a deferred session had to wait before 
gaining access to the server.After the initial rejection, the user is 
prevented from returning to the site for a specified amount of time. If a 
session is allocated, this is the minimum delay that can be scheduled. 
You can set this time interval with the directive 
HPACRejectedExclusionTime. The default is "300" seconds. For 
example, to specify that the user will have to wait 120 seconds before he 
can again try to access the site, use the following directivein your 
configuration file: 

HPACRejectedExclusionTime 120 
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Creating an Allocation Page for Rejected Sessions. The 

following is the default contents of the deferral (allocation) page: 

Server Busy 

We are sorry our server is busy, and in order to ensure adequate 
levels of service to our current visitors, we cannot serve you at 
this time. We have allocated you a position in line and will serve 
you as soon as we can. 

You will automatically enter the site in mm:ss (minutes:seconds). 

The page has three parts, which can beset independently. The first part 
is the title (Server Busy). You can change the title with the 
HPACDeferraiTitie directive. Toset thetitleto "SiteTemporarily 
Unavailable," use the foil owing directive in your configuration file: 

HPACDeferraiTitie Site Temporarily Unavailable 

The second part of the deferral page is an explanatory message, which 
can beset with the HPACDeferraiMessage directive. An informative 
message is likely to span several lines, in which case you have to escape 
the newline character on all but the last line. For example, 


HPACDeferraiMessage We are sorry, our server is busy. I n order \ 

to ensure adequate levels of service to \ 
our current visitors, we cannot serve you \ 
at thistime. We have allocated you a\ 
position in line and will serve you as\ 
soon as we can. 

The third part is the countdown line, which can be set with the 
HPACDeferraiEnterMsg directive. For example: 

HPACDeferralEnterMsg Time left: 
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Logging HP AdmissionControl Information 

Saving I nformation to the Server Access Log. hp ac 

admission decisions can be saved tothe server's accesslog, by adding the 
"%-{HPAC}n"format option tothe LogFormat directive. For example: 

LogFormat %h %1 %u %t \%r\ %>s %b %{HPAC}n 

The effect of this option is to append one of the words listed below tothe 
log message: 


rejected 

basic 


priority 


deferred 


The request was rejected 

The request was processed as part of a basic 
priority session 

The request was processed as part of a high 
priority session 

The request was deferred to a future time 
slot 


redirected 


The request was redirected to another server 


Logging Statistics to a File. The statistics displayed on the hp 
A dmissionControl Statistics web page can be logged to a file. You 
can turn on statistics logging with the HPACStatsLogging directive. 
The default for this directive is "off." For example: 

HPACStatsLogging on 

I n addition, you can specify the time interval between log updates with 
the hpACL ogUpdateinterval directive. The default for this directive is 
"300" seconds. You can specify the log file with the HPACStatsLogf ile 
directive. 
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For example, to specify that the log file 

apache_home/var/iog/stats .hpac is updated every 600 seconds, use 
the foil owing directives: 

HPACLogUpdatelnterval 600 

HPACStatsLogfile var/log/stats.hpac 

The log update interval has to be a multiple of 5 seconds. For example, if 
you set the interval to 1 second, the update will take place after 5 
seconds. If you set the interval to 7 seconds, the update will take place 
after 10 seconds. 

If logging is enabled, but the log file has not been specified, the default 
log file is apache_home/var/iog/hpac. log (or 
apache_home/logs /hpac. log, depending on the layout of 
apache_home). 


NOTE The HPACStatsLogging, HPACLogUpdatelnterval and 

HPACStatsLogf ile di rectives set global AC parameters, therefore they 
should be used outside virtual host configuration blocks. They are 
ignored inside the virtual host configuration blocks. 


A log entry consists of a number of comma separated fields, as follows: 

07/Oct/1998:19:30:00,virtual.host.com,15,0,0,0,0,0,0,0, 
181,0,0,0.5,0.00,92 

The first field is the update time (GMT) and the second field is the name 
of the virtual host to which the statistics refer. The table below lists the 
remaining fields. 

Table 2-7 HP AC for Apache Log File Statistics 


Statistic Name 

Example Value 

Basic Sessions 

15 

Priority Sessions 

0 

Redirected Sessions 

0 

Sessions Rejected 

0 

Sessions Rejected Again 

0 

Sessions Timed Out 

0 

Sessions Too Long 

0 
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Statistic Name 

Example Value 

Bad MD5 Requests 

0 

Basic Requests 

181 

Priority Requests 

0 

Management Requests 

0 

Load 

0.5 

Percentage Priority Requests 

0.00 

Last Allocation Delay 

92 


Other Configuration Considerations 

This section covers tasks beyond basic configuration: 

Admission Control and Response Caching. To control session 
admissions, hp ac tracks the session state by including cookies in http 
responses. For the session tracking mechanism to work properly, server 
responses can no longer be cached. This, in turn, impacts the 
performance of the server. 

You can alleviate the problem by specifically allowing caching of certain 
mi me types, short of allowing a session to be fully served from cached 
responses. Good candidates for caching are mi me types representing 
objects embedded in an HTML document (for example, images, sounds). 

To turn on caching, use the HPACMimeCaching directive. The default for 
the directive is "off." For example, toturn mime caching on, use the 
following directive in your configuration file: 

HPACMimeCaching on 
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With mime caching on, the hp ac allows caching of the foil owing mime 
types: 


NOTE 


audio/basic 

audio/midi 

audio/x-wav 

audio/x-liveaudio 

audio/x-pn-realaudio 

i mage/fif 


imag^gif 

imag^ief 

i mag^ifsi mage/j peg 
imag^tiff 
imag^wavelet 
imag^vnd 


i mage/x-photo-cd 
video/quicktime 
video/x-mpeg2 
video/x-msvideo 


You can turn off caching of individual mi me types in this list with the 
HPACMimeNocache directive. For example, assuming that mime caching 
is on, the foil owing directive turns off caching for the specified mime 
types: 

HPACMimeNocache video/x-mpeg2 audio/x-pn-realaudio 

You can add to the default list of mi me types that can be cached with the 
HPACMimeCache directive. For example, if mime caching is on, the 
following directive adds the specified mi me types to the list of mime 
types that can be cached: 

HPACMimeCache image/x-rgb image/x-xpixmap 

If the list of mi me types passed to the HPACMimeNocache and 
HPACMimeCache directives is too long to fit on one line, the newline 
character must be escaped on all but the last line. 

The caching commands specified in the configuration file have no effect if 
a document cannot be cached in the first place (for instance, documents 
created dynamically). 

System Resources Sharing Among Virtual Hosts. By default, 
each virtual host equally shares the system resources. FI owever, this 
does not guarantee equal use of the resources. Virtual hosts hosting 
active sites may use more than their fair share of system resources, at 
the expense of other virtual hosts. A more equitable use of system 
resources can be achieved using one of the techniques described below. 
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You can influence the access of virtual servers to system resources by 
using different load thresholds for the virtual hosts. For instance, you 
could set the load threshold lower for virtual hosts that have a tendency 
to use most of the system resources. Conversely, you can set the load 
threshold higher, or even turn off admission control, for virtual hosts 
that have little impact on the system resources. 

You can use the HPACShareUnits directive to give more weight to some 
of the virtual hosts. The default for this directive is "1." For example, to 
give more weight to some of the virtual hosts, usethe following directive 
in your configuration file: 

HPACShareUnits 2 

To understand the effect of this command, assume that you have three 
virtual hosts, A, B and C: A is assigned one share of system resources, B 
is assigned two shares and C is assigned three shares. (There are a total 
of six shares.) This amounts to assigning 17% of system resources to A 
(1 / 6 * 1), 33% to B (1 / 6 * 2) and 50% to C (1 / 6 * 3). 

The assigned share of system resources is used to compute the actual 
priority threshold for each virtual host from the server-wide priority 
threshold. You can set the value for the server-wide priority threshold 
with HPACAdmitP r i or it y Threshold. The default for this directive is 
"0.9.”. For example, to set the server-wide priority threshold to .75, use 
the following directive in your configuration file: 

HPACAdmitPriorityThreshold 0.75 

The setting above will allow up to 75% of all sessions to be priority 
sessions. Beyond this threshold, even priority sessions are rejected. The 
value set with directive is used to compute the priority threshold for 
individual hosts, taking into account the assigned share (see 

HPACShareUnits above). 

The assigned share is also used to give priority to under-represented 
virtual hosts, when virtual host isolation is in effect. Virtual host 
isolation is turned on with the HPACVHostisoiation directive. The 
default for this directive is "off." For example, to turn on virtual host 
isolation, use the foil owing directive in your configuration file: 

HPACVHostisoiation on 

With this option in effect, the admission controller raises the priority of 
new sessions for those virtual hosts that contribute less than their 
assigned share to the system load. 
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Global Parameters. Most hp ac configuration directives set values 
for parameters that affect individual virtual hosts. A few of them set 
values for parameters that affect all virtual hosts. These directives are: 


HPACAdmitPriorityThreshold HPACStatsLogfile 
HPACIsolateDamping HPACStatsLogging 

HPACLoadDamping HPACVHostIsolation 

HPACLogUpdateInterval 


The directives setting global AdmissionControl parameters should be 
used outside virtual host configuration blocks. I nside virtual host 
configuration blocks, the directives are ignored and the parameters they 
try to set revert to default values. 
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What is HP LocalDirector Controller? 

HP LocalDirector Controller (hp ldc) works with Cisco LocalDirector by 
automatically generating the information needed by Cisco LocalDirector 
to load balanceTCP/l P traffic across multi pie servers, hp ldc, 
specifically the HP LocalDirector Control daemon (idc_agt), must be 
configured and running on each system that is managed by Cisco 
LocalDirector. Information regarding Cisco Local Director can be found at 
the URL http ://www.cisco.com/warp/public/751/lodir/. 


H P 9000 



H P 9000 


The information generated by hp ldc is referred to as "weights" in this 
document. The weights help Cisco LocalDirector determine which 
system has the resources to process an incoming request. 

Initial weights are generated by the Webstone benchmark tool. Webstone 
generates traffic to a system and calculates the throughput based on 
getting different-sized static pages in three minutes. The throughput is 
used to calculate the initial weights. 

hp ldc adjusts the weights depending on CPU usage and system load. 
Both the CPU usage and system load (measured by a one minute average 
job queue) must reach their configured thresholds before the weights are 
lowered. The weights will range between one and the initial weights. 
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Installing HP LocalDirector Controller 

HP LocalDirector Controller (hp ldc) is part of the HP Domain 
ServiceControl (hp dsc) product. You do not need to load the entire hp 
dsc product if you only want to use hp ldc. 

Installation Requirements 

Hardware Requirements 

• H P 9000 computer system 

• 32 M B of memory 

• CD-ROM drive to load the software 

Software Requirements 

• HP-UX 10.20 or 11.0 

• HP DESMS 

• An HTTP server such as Netscape Enterprise or FastTrack Server 
version 3.0 or later 

• A web browser that supportsj DK 1.1, such as 
Communicator 4.06 or M icrosoft I nternet Explorer 4.0 

Other Requirements 

• A system already running Cisco LocalDirector version 2.1 or later 

I nstal I i ng the Software 

To install hp ldc, run swinstaii (as root), double-click on the bundle 
J 1592AA to view the software, and select the hp ldc software. 
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Configuring Cisco LocalDirector 

Because HP LocalDirector Controller sends information to Cisco 
LocalDirector using SNMP traps, thesnmp-server host parameter must 
be configured in the Cisco LocalDirector. 

On a system managed by Cisco LocalDirector, run netstat -rn and 
check the routing table information. Use the IP address associated with 
the Cisco LocalDirector gateway to configure the snmp-server host 
parameter 

Refer to Cisco Local Director's manuals for information on setting this 
parameter and other configuration information. 
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Configuring HP LocalDirector 
Controller 

There are two components you need to configure before usingHP LDC:the 
HP LDControl server and the HP LDControl daemon. 

You must configure hp ldc using the HP Domain Enterprise 
Management System (hp desms). Instructions on how to start hp desms 
are included in this manual. For more information on hp desms, please 
refer to the Getting Started with HP Domain Software manual. 

Starting HP DESMS 

Tostart hp desms, do the foil owing: 

1. Start the HP administration server. Type the foil owing: 

/opt/hpwebsuite/start-admin 

2. Start a browser that supports frames, isj ava-enabled, and supports 
J DK 1.1. 

3. GototheURL 

http: //hostname: 8181 

where hostname is the name of the system on which you are running 
the HP administration server. 

Reload this page if you have visited this page prior to this 
installation. 

4. Enter the following administration user (server) ID and password: 

U ser ID : hpadmin 

Password: hpadmin (you may have changed this during the setup 
process) 

If you are starting hp desms for the first time, the page to configure the 
HP LDControl daemon is displayed. 
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Configuring the HP LDControl Server 


After starting hp desms, click on "Service Control" from the side menu 
and then "Server Configuration."The following page displays: 
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Set the foil owing parameters to configure the HP LDControl server: 

Table 3-1 HP LDControl Server Configurable Parameters 


Parameter 

Description 

Server Directory 

The home directory of the web server. For 
example, /opt/ns-enterprise3. 

Port Number 

The port number used by the web server. This 
must be a non-SSL port number. For example, 80. 

Document 

Directory 

The document root di rectory of the web server. For 
example, 

/opt/ns-enterprise3/docs-https-default. 


The HP LDControl daemon must be started/restarted for these values to 
take effect. See "Starting and Stopping the HP LDControl Daemon" on 
page 55 for more information on starting hp ldc. 


NOTE The web server configured i n the 

/ etc/hpldc/webs tone/ conf / server-list file must be running 
before the HP LDControl daemon is started. 
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Configuring the HP LDControl Daemon 

After starting hp desms, select "Service Control” from the side menu and 
then "Configuration."The following page displays: 



Set the foil owing parameters to configure the HP LDControl daemon: 


HP LDControl Daemon Configurable Parameters 


Parameter 

Description 

LocalDirector 

Hostname 

The hostname of the system on which Cisco 
LocalDirector is running. 

Dynamic Weight 

Starts/Stops the H P LDControl daemon. 

When activated, the daemon will monitor the 
system and adjust the weights, if necessary. 
When deactivated, the H P LDControl daemon 
sends the initial weights to Cisco 

LocalDirector and exits. 
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Parameter 

Description 

CPU Threshold 

The highest percentage the CPU usage 
should reach before the weight of the server is 
automatically decreased. Note that the run 
queue threshold (average load) must also be 
reached before the weights are adjusted. 

Default: 80 

Range: 50 - 100% (integer only) 

Run Queue Threshold 

The highest amount the average load should 
reach before the weight of the server is 
automatically decreased. Note that theCPU 
usage threshold must also be reached before 
the weights are adjusted. 

Default: 2 

Range: 1.0 -10.0 (real number) 

Time 1 nterval 

How often, in seconds, the thresholds are 
checked and adjustments are made, if needed, 
to the weights. 

Default: 5 seconds 

Range: 5 - 300 seconds (integer only) 


Click on "OK" to save your changes. The values are saved in the file 

/etc/opt/hpldc/conf/ldc.conf. 

NOTE The web server configured i n the 

/ etc/hpldc/ webs tone/ conf/ server-list file must be running 
before the HP LDControl daemon is started. 
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Starting and Stopping the HP LDControl 
Daemon 

The HP LDControl daemon can be started and stopped frorrmp desms. 
Select "Service Control" from the side menu and then "Start/Stop 
Daemon." A page similar to the foil owing displays (what is displayed 
depends on the status of the HP LDControl daemon: running or not 
running): 


NOTE The web server configured i n the 

/opt/hpldc/webstone/conf /server-list file must be running 
before the HP LDControl daemon is started. 



Tostart orstoptheHP LDControl daemon from the command line, type: 
/opt/hpldc/bin/ldc_agt 
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Configuring a System with More than One 
LAN Card 

If the system on which you are running the Webserver has more than 
one LAN card, you must set thesnmp-server host and real parameters in 
Cisco LocalDirector. Do the foil owing: 

1. On the system with multiple LAN cards, run netstat -rnandcheck 
the routing table information. UsethelP address associated with the 
Cisco LocalDirector gateway to configure thesnmp-server host 
parameter of Cisco LocalDirector. 

2. On the system with multiple LAN cards, run 

nslookup localhostnameand use this IP address to configure the 
real parameter of Cisco LocalDirector. 

Refer to Cisco Local Director's manuals for information on setting these 
parameters. 
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Table 3-3 


Table 3-4 


Troubleshooting the HP LD Controller 

General Troubleshooting 

If an error occurs, check the following two log files for error messages, 
causes, and recommended acti ons: 

1. /var/opt/hpldc/ldc.log 

2. /var/opt/hpldc/webstone.log 


Problems Accessing the HP LD Controller 
from HP DESMS 

Browser E rror Message and Action 


Error 

Message 

Action 

Applet 

ConfApplet 
can't start. 

The browser that you are using to administer the 
system must support J DK 1.1 in order to run hpldc. 
Two browsers that support J DK 1.1 are Netscape 
Navigator 4.05 and Microsoft 1 nternet Explorer 4.0. 


HP LDControl Daemon 

If the H P LDControl daemon dies, check for the following error messages 
in the /var/opt/hpldc/ldc. log file. Complete the listed actions for 
the specified messages. 


HP LDControl Daemon Error Log Messages and Actions 


Error 

Message 

Action 

Cannot open 
file filename. 

Check that thefilefilenameexists and that the H P 
LDControl daemon has write permission to its 
di rectory. 
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Error 

Message 

Action 

Server might be 

1. Make sure the web server is running on the system. 

down. 1 nitial 

Restart/Start the web server and then restart the H P 

weight set to 0. 
Exiting. 

LD Control daemon. 

2. Check the parameters in the file 

/etc/hpldc/webstone/con f /server-list. 

3. In /etc/passwd, check for the following entry: 

webstone:trKI3 j iXvewTw:33: 1 : :/tmp:/sbin/sh 

If this entry does not exist, add it to the file. 

4. If the web server is running, make sure it is using a 
non-SSL port. The H P LDControl daemon must use a 
non-SSL port to generate the initial weight. 

Cannot send 

1. The snmp-server host parameter must be set on the 

weight to 

system running Cisco LocalDirector. Refer to Cisco 

LocalDirector. 

Local Director's manual for more information on setting 
this parameter. 

2. Check that LDHostnameis set tothesystem running 
Cisco LocalDirector in the 

/etc/opt/hpldc/conf/ldc . conf file. 
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HP AdmissionControl Configurable 
Parameters for Netscape 

You can modify the behavior of the hp ac modules by setting the 
appropriate parameters in your Netscape configuration file: 

/opt/ns-server_name/server_id/conf ig/hpac/conf ig. ac. 


Table A-l HP AC Configurable Parameters for Netscape 


Parameter 

Range/Type 

Default 

Description 

admit.always 

N/A 

N/A 

Configures hp ac to always accept 
sessions. 

admit.load 

N/A 

N/A 

Sets the "Admit Sessions" to use the 
load threshold. 

admit, load.threshold 

0.0 <=x 

2.0 

Sets the load threshold for admitting 
a session. 

admit.priority.damping 

0.0 <=x <=1.0 

0.001 

The dampi ng factor used to compute 
the priority percentage. Larger 
values make the controller more 
responsive to recent activity. 

admit.priority.threshold 

0.0 <=x <=1.0 

0.9 

The value of the priority fraction 
when priority requests are rejected 
(0.9 =90% priority percentage). 

admit.shutdown 

N/A 

N/A 

Sets the "Admit Sessions" to 
shutdown. 

admit.shutdown.delay 

0 <=n 
(integer) 

600 

Sets how much time before hp ac 
shuts down and rejects all (new and 
remaining) sessions. 

duster.disable 

N/A 

N/A 

Disables clustering. The system will 
not try to open the hpac-ciuster 
port. 

duster.domain 

string 


The domain used to limit the scope 
of the cluster over which the 
client-side cookies can be shared. 

duster.group 

string 

default 

Sets the cluster group. 
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Parameter 

Range/Type 

Default 

Description 

cl u ster. keepa 1 i ve. i n ter va 1 

1 <=n 
(integer) 

60 

The number of seconds between 
status broadcasts. 

cl uster. keepa 1 i ve. mi sses 

1 <=n 
(integer) 

3 

The number of missed status 
broadcasts before a server is 
identified as down. 

duster.TTL 

0 <=n 
(integer) 

0 

Sets the cluster TTL which is the 
number of redirections allowed 
before rejecting the session. 

cookie, password 

string 

N/A 

Sets the password used in creating 
the MD5 digest. 

deferral.enterMsg 

string 

You will 

automatically enter 
the site in 

Part of the allocation page message 
served when a session is rejected. 

deferral.message 

string 

We are sorry our 
server is busy, and in 
order to ensure 
adequate levels of 
servicetoour current 
visitors, we cannot 
serve you at this 
time. We have 
allocated you a 
position in lineand 
wi 11 serve you as soon 
as we can. 

Part of the allocation page message 
served when a session is rejected. 

deferral.title 

string 

Server Busy 

Part of the allocation page message 
served when a session is rejected. 

endsessi on.duration 

0 <=n 
(integer) 

0 

Sets, in seconds, the maximum 
session duration 

endsession.requestl nterval 

0 <=n 
(integer) 

300 

Sets, in seconds, the maximum 
interval between requests 
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Parameter 

Range/Type 

Default 

Description 

isolate, damping 

0.0 <=x <=1.0 

0.001 

The dampi ng factor used to compute 
the share of resources being used by 
each virtual server. Larger values 
makethecontroller more responsive 
to recent activity. 

isolate, pattern 

string 

N/A 

The pattern used to identify virtual 
servers. If provide, hp ac will isolate 
traffic to each virtual server. 

load.damping 

0.0 <=x <=1.0 

0.1 

The dampi ng factor used to compute 
the web server load. Larger values 
makethecontroller more responsive 
to recent activity. 

1 og.fi 1 e 

string 

N/A 

Thefull path name of theHP ac log 
file. The statistics from the hp 

AdmissionControl Statistics 

web page are logged to this file. 

log. interval 

1 <=n 
(integer) 

600 

How often, in seconds, the statistics 
are logged to the log.file. 

mime.cache 

N/A 

See "Defaults 

Already Configured 
in config.ac" on page 
64. 

The web server should cache the 
specified mi me types. 

mime.nocache 

N/A 

N/A 

The web server should cache all but 
the specified mi me types. 

mime.type 

string 

N/A 

Specifies the mi me type used by the 
caching policy. 

reject.error 

N/A 

Server Temporarily 
Unavailable 

Sets the response to a rejected 
session to the "Server Temporarily 

U navailable" error message. This 
message is not configurable. 

rej ect.exd udeTi me 

0 <=x 

300 

Sets how long, in seconds, the user is 
prevented from returning to the site. 
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Parameter 

Range/Type 

Default 

Description 

reject.external 

N/A 

Server Temporarily 
Unavailable 

Sets the response to a rejected 
session to use an external function 
or application. Currently, it will only 
serve the "Server Temporarily 

U navailable" error message. 

reject.future 

N/A 

N/A 

Sets the response to a rejected 
session to a countdown web page. 

reject.future.rate 

1 <=n 
(integer) 

10 

Set the number of sessions that can 
be admitted each minute. 

reject.page 

N/A 

N/A 

Sets the response to a rejected 
session to a customizable web page. 

reject.page, path 

string 

N/A 

Thefull path and file name of the 
customizable web page. 

shlib.initialize 

string 

N/A 

The name of the function that 
initializes the library. 

shlib.library 

string 

N/A 

The file name of the shared library. 

shlib.loadMetric 

string 

N/A 

Thenameof thefunction used as the 
load metric. 

sh lib. release 

string 

N/A 

The name of thefunction that 
releases resources allocated by the 
library. 

shlib.reject 

string 

N/A 

The name of the function used when 
the reject policy is set to External. 

sh lib. session State 

string 

N/A 

The name of thefunction that 
modifies the session state. This 
function may change the priority of 
sessions or end sessions. 
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Defaults Already Configured in config.ac 

The following are defaults that have been configured in the 

/opt/ns-server_name/server_id/config/hpac/config. ac file: 

# Warning, manual changes to this file will be 

# overwritten by changes made 

# via the Admission Control Policy screen. 

mime.cache # a list of likely cache candidates follows 

mime.type audio/basic 

mime.type audio/midi 

mime.type audio/x-wav 

mime.type audio/x-liveaudio 

mime.type audio/x-pn-realaudio 

mime.type image/fif 

mime.type image/gif 

mime.type image/ief 

mime.type image/ifs 

mime.type image/jpeg 

mime.type image/tiff 

mime.type image/wavelet 

mime.type image/vnd 

mime.type image/x-photo-cd 

mime.type video/mpeg 

mime.type video/quicktime 

mime.type video/x-mpeg2 

mime.type video/x-msvideo 
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HP AdmissionControl Configurable 
Parameters for the Apache Web Server 

You can modify the behavior of the hp ac modules by placing the 
appropriate directives (commands) in your Apache configuration file(s): 
either httpd . conf, srm . conf, or access . conf. These configuration 
files can be found in apache_home/etc/ (or in apache_home/conf/, if 
you used the older installation layout.) 


Table A-2 HP AC Configurable Parameters for the Apache Web Server 


Parameter 

Argument 

Default 

Description 

H PACAdmissionControl 

On or Off 

On 

Turns admission control on or 
off. 

H PACAdmitLoadThreshold 

x >0.0 

(real number) 

2.0 

Sets the load threshold 
beyond which no new session 
is admitted. 

H PACAdmitPriorityThreshold 

0 <= x <=1.0 
(real number) 

0.9 

Sets the upper limit for the 
percentage of priority 
requests that can be 
admitted, (for example, 0.9 
means that 90% of al 1 
requests admitted can be 
priority requests.) Beyond 
this limit, even priority 
requests will be rejected. 

H P A C C ook i eD oma i n 

the string 
following the 
hostname in a 
fully qualified 
domain name 
(see 

description) 

the domain extracted 
from the fully 
qualified domain 
name of the web 
server running the 
admission controller 

Sets the domain over which 
cookies will be shared. 

For example, the domain for 
host www.software.hp.com 
is .software.hp.com 

H PACCookiePassword 

string 

N/A 

Sets the password used to 
create the MD5 digest for the 
cookie. 
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Parameter 

Argument 

Default 

Description 

HPACDeferralEnterMsg 

string 

You will 

automatically enter 
the site in 

Sets the heading for the time 
counter on the deferral page. 

H PAC Defer ra 1M essage 

string 

We are sorry, our 
server is busy. 1 n 
order to ensure 
adequate levels of 
service to our current 
visitors, we cannot 
serve you at this 
time. We have 
allocated you a 
position in lineand 
wi 11 serve you as soon 
as we can. 

Sets the descriptive message 
displayed on the deferral 
page. 

If the message takes several 
lines, the newline character 
should be escaped on all but 
the last line. (For example: 

We are sorry, our server is\ 
busy. 1 n order to ensure...) 

HPACDeferralTitle 

string 

Server Busy 

Sets the title of the deferral 
page. 

H PACDeferredAdmitRate 

n >=1 
(integer) 

10 

Sets the rate (per minute) at 
which deferred sessions will 
be admitted to the server. 

H PAC 1 dl eSessi onT i meout 

n >=0 
(integer) 

300 

Sets the time interval (in 
seconds) that can elapse 
between successive requests 
of a session before the session 
is considered idle (that is, 
next request from the same 
user agent will be the start of 
a new session.). 

H PACI solateDamping 

0 <x <=1.0 
(real number) 

.001 

Sets the dampi ng factor used 
to compute the share of 
resources used by each virtual 
server. Larger values make 
the controller more responsive 
to recent activity. 

HPACLoadDamping 

0 <= x <=1.0 
(real number) 

0.1 

Sets the dampi ng factor used 
to compute the web server 
load. Note: larger values 
make the controller more 
responsive to recent activity. 
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Parameter 

Argument 

Default 

Description 

H PACLogU pdatel nterval 

n >0 
(integer) 

600 

Sets the time interval (in 
seconds) between statistics 
log updates. Note: the 
granularity of the time 
interval is 5 seconds (that is, 
if the interval is set to one 
second, the update will take 
place after five seconds; if set 
to six seconds, the update will 
take place after 10 seconds, 
etc.). 

HPACMimeCache 

a list of one or 
more space- 
separated 
mi me type 
strings 

audio/basic 

audio/midi 

audio/x-wav 

audio/x-liveaudio 

audio/x-pn-realaudio 

image/fif 

image/gif 

image/ief 

image/ifs 

image/jpeg 

image/tiff 

image/wavelet 

image/vnd 

image/x-photo-cd 

video/quicktime 

video/x-mpeg2 

video/x-msvideo 

Sets the mi me types the 
server can cache (all other 
mi me types are not cached). 
Note: If the list takes several 

1 i nes, the newl i ne character 
should be escaped on all but 
the last line. 

HPAC MimeCaching 

on/off 

off 

Turns mi me caching on or off. 

HPACMimeNocache 

a list of one or 
more space- 
separated 
mi me type 
strings 

all, except those 
listed in the default 
list for 

HPACMimeCache 

Removes mi me types from the 
list of mi me types the server 
can cache. 

Note: If the list takes several 
lines, the newline character 
should be escaped on all but 
the last line. 
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Parameter 

Argument 

Default 

Description 

H PACRedirectU RL 

[http://]host 

[:port] 

N/A 

Sets the URL of an alternate 
site where rejected requests 
can be redirected. Note: the 
alternate site should be a 
mirror of the site that 
redirected the request, 
otherwise redirection will not 
work. 

H PACRejectPagePath 

file path 

N/A 

Sets the path of the file 
containing the document to be 
displayed when a request is 
rejected and the rejection 
policy is rejectpage The path 
can be absolute or relative to 
the web server root. 

HPACRejectedExdusionTime 

n >0 
(integer) 

300 

Sets the time interval (in 
seconds) to elapse before a 
rejected session can be 
considered again for 
admission. 

H PAC Rej ecti on Pol i cy 

defer | reject| 
rejectpage 

reject 

Sets the rejection policy. Ifthe 
policy is reject (default), users 
whose requests are rejected 
will seethe message returned 
by the server for the 

HTTP SERVICE 
UNAVAILABLE code. 

Ifthe policy is rqectpage, the 
document in the file set by 
HPACRejectPath is returned. 




If the policy is defer, a deferral 
page showi ng the ti me the 
user has to wait before 
gaining access is displayed. 

H PACSessionDuration 

n >=0 
(integer) 

0 

Sets the maximum duration 
(in seconds) of a session. 

When set to 0 (default), the 
session never expires. 
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Parameter 

Argument 

Default 

Description 

HPACShareUnits 

n >0 
(integer) 

1 

Sets the number of units of 
server resources a virtual host 
is entitled to use. (A unit is 
calculated as 

1.0/total_share_units). This 
number is used to compute 
the percentage of the web 
server's total resources a 
virtual host is allowed to use. 
For instance, if the share 
units assigned to three virtual 
hosts A, B and C are 1, 2 and 
3, then A can use up to 17% of 
the server's resources (1/6 * 

1), B can use up to 33% of the 
server's resources (1/6 * 2) 
and C can use up to 50% (1/6 * 
3) of the server's resources. 

HPACStatsLogfile 

file path 

apache_home 
/var/log/hpac.log 

| apache_home 
/logs/hpac.log 

(depending on the 
apache_home layout) 

Sets the path of the file to 
which the admission control 
statistics are logged. The path 
can beabsolute, or relative to 
the web server root. 

HPACStatsLogging 

on/off 

off 

Turns statistics logging on or 
off. 

H PACVH ostl solation 

on/off 

off 

Turns on or off virtual host 
isolation. When virtual host 
isolation is on, new sessions 
belonging to 

under-represented virtual 
hosts are admitted at priority 
level. 
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